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Synopsis: Following is the status of WFO's involvement in this 

investigation. 

Reference: EC dated 2/17/98 to Houston Division. 


Details: 


288-WF-211047 1 


U.S. NAVY - VICTIM; OO: WFO". 


SA | ~| is coordinating all investigative 

activity with Agents of the Naval Criminal Investigative Service 
(NCIS) based in both Washington, D.C. and Jacksonville, Florida. 
Evidence obtained from subject's University of Northern Florida 
(UNF) account has disclosed continuing access to that account 
from an IBM.NET connection. A requ e st was submitted toda y to DOJ 
for a pen register to require I ~Tto I | 

| Results of t hepe n are 

anticipated to 'support a su bsequent 2703 (d) order to ! l for 

I The subject's current whereabouts and 
employment are known. Coordination with the NCIS Agents will 
continue. The installa tion of the mo ni toring software at 
was initiated I lb 


288-HQ-1242560 "SOLAR SUNRISE: CITAC MATTERS: OO: HQ 













( 03 / 31 / 95 ) 


FEDERAL BUREAU OF INVESTIGATION 

To: WMFO From: WMFO 
Re: 66-, 12/01/1995 

Optical disks received from H ouston and copies will be 
made ASAP for AF, Navy, DISA, and I ~l Contact has been made 
with IBM network management and IBM is trace routing Israeli 
network leg. Should know by tomorrow monitoring ability from 
within US of overseas leased nets. Referral/Consult 


Analysis performed for three compromised systems: (1) 
Univ. California, Berkeley, (2) Andrews AFB, (3) US Naval 
Academy. To date, nothing significant has been identified in the 
most recent JID data collected for the past day or so. Observed 
two suspicious sites (netgate.saes.com and netdex.com). WFO has 
not confirmed the nexus on these sites. 

Gospelcom.net not contacted due to N CIC checks 
revealing | | Thegospel.com does 

not answer phone, nor do they call back when message left. Will 
continue to try to contact. Slip-stream.net SYSOP did not see 
anything unusual. They have been hacked before and do not 
consider this out of the norm. ^ ^ 


Referral/Cor 


On 02/13/98, Court Order served on 


| | WFO CART tasked to make copies for Navy, AF, | 

and DISA. Li mited data analysis has been conducted due to tim e 
constraints. I I 


_ WFO cannot look through these files and is 

awaiting DOJ advice. WFO obtaining from UM copies of their 
computer policy that the students are informed of when their 
receive their computer accounts. WFO does not believe that the 
student, 1 1 should be contacted to give consen t due tc 

the nature of the case and the fact that the student is al 


zerral/Consult 


288-WF-NEW 1 


□3 VICTIM; 00: WFO' J 


pursuant 


court order 













( 03 / 31 / 95 ) 


FEDERAL BUREAU OF INVESTIGATION 

To: WMFO From: WMFO 
Re: 66-, 12/01/1995 

SA | |is addressing this matter with th e 

assistance of the | ______ -| 

| l and WFO CART, 

Subject's home was consensually searched for computer and 
computer media the evening of 2/17/98. Newark Division CART 


| Copy will be provided 

to| I ASAP. Subject provided detailed interview to both FBI and 
| Agents. Gave no indication he was part of ongoing 
investigation 288-HQ-1242560. A review of his system is under 
way. ; h n 


















